Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/47d55cd0-2306-4409-93ff-3e6c739c1b49.roa
File:                     47d55cd0-2306-4409-93ff-3e6c739c1b49.roa (raw, json)
Hash identifier:          DxeekfwhDVsV3y/TOt/aibk/ErblFbSf23Ev2OncKI4=
Subject key identifier:   99:8D:66:F5:CC:9D:D7:B2:94:74:A9:FA:09:64:E6:20:CA:77:3C:05
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       1E8F64F3D08EAE9991F902FFCE5D68B58999AC92
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/47d55cd0-2306-4409-93ff-3e6c739c1b49.roa
Signing time:             Wed 21 Sep 2022 00:00:00 +0000
ROA not before:           Wed 21 Sep 2022 00:00:00 +0000
ROA not after:            Sat 24 Sep 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8f:64:f3:d0:8e:ae:99:91:f9:02:ff:ce:5d:68:b5:89:99:ac:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Sep 21 00:00:00 2022 GMT
            Not After : Sep 24 23:59:59 2022 GMT
        Subject: serialNumber=1fe6f1adcfb6aa813797d27538153b94b3886b28e6d2fd7a94c2481de30f6535, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:36:ea:0a:46:5e:22:a7:b3:f3:93:26:b8:
                    b5:df:fc:71:b0:37:c8:84:cf:10:28:7f:2e:47:4d:
                    03:94:6b:ab:72:b6:da:8d:7a:57:f0:4b:93:17:20:
                    97:05:20:be:2b:7c:e4:00:30:f1:a6:f4:00:48:c9:
                    9c:16:91:b0:49:3d:a8:12:ef:9f:b3:fc:81:75:24:
                    4b:73:c7:b1:d7:28:b6:84:c1:1f:da:84:ed:9b:db:
                    89:44:92:ab:21:40:68:0f:7a:26:9c:a1:b9:b5:e7:
                    af:3b:c1:4b:8a:fa:66:f5:1c:a9:07:12:38:3f:e0:
                    ab:a8:3b:c0:39:d2:4d:29:64:2d:a7:a1:d1:d7:02:
                    14:ec:a3:b9:ce:e7:e3:35:43:aa:80:bd:5f:2f:46:
                    e9:44:a0:1a:78:65:30:f1:30:10:3b:5b:46:1c:e7:
                    6f:96:6f:89:47:01:6b:78:02:01:bd:67:ac:17:bf:
                    30:8a:c4:09:3b:42:39:13:55:0d:c5:8c:4b:1f:4f:
                    d9:8b:24:81:e2:97:11:7b:af:4a:69:39:a7:a7:3a:
                    79:01:99:79:7b:6f:8b:94:f2:da:d4:7f:91:f4:dc:
                    50:f6:33:4c:e4:b7:aa:b1:6e:a3:8b:2e:f5:49:77:
                    01:0e:e4:e3:64:95:2e:57:e2:ab:a4:b7:8b:3d:b1:
                    3f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8D:66:F5:CC:9D:D7:B2:94:74:A9:FA:09:64:E6:20:CA:77:3C:05
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/47d55cd0-2306-4409-93ff-3e6c739c1b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:e8:0b:a6:48:60:14:4f:a9:24:42:60:c7:80:56:bc:0c:4b:
         06:4c:ad:ab:16:ae:c0:1d:45:6e:13:b5:50:58:b3:fa:37:52:
         9b:c1:7a:ea:25:b2:7a:46:9e:35:f7:97:6a:9d:fa:6e:c1:d2:
         3d:19:39:66:62:15:e4:4f:fa:34:05:f5:b9:91:15:63:f6:a5:
         b6:9f:a6:e7:49:28:0c:1d:d2:ac:65:7e:ef:d8:c7:50:b4:7c:
         22:05:46:f2:9f:14:b5:ba:48:f4:87:69:3b:fc:b2:fd:d9:34:
         bc:13:36:91:70:c7:37:b4:75:ba:6b:d7:bb:b6:cf:06:bd:0f:
         96:71:4e:32:31:be:91:40:27:d8:53:73:e9:94:11:45:7e:ac:
         73:01:78:44:8d:34:3c:b4:8d:32:93:08:47:4d:44:a2:07:17:
         e4:c8:33:a5:e8:06:1e:4d:36:27:8c:c2:1e:dc:67:96:12:67:
         f4:be:4e:b8:ae:8e:fc:88:00:e2:d9:c4:ca:b0:75:c8:94:99:
         04:55:0a:5e:73:1e:ea:e8:11:92:dd:99:b4:c6:82:77:93:7f:
         5b:7d:2c:80:30:a3:a9:51:64:85:7f:b5:fd:d7:77:5e:a2:77:
         10:e0:21:12:51:d5:c0:d9:24:59:55:cf:ab:2c:58:d8:01:41:
         46:45:5c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----